Re: Simple proxy setup

Kevin ten Braak <[email protected]>
Newsgroups gmane.network.net-snmp.user
Message-ID <CAA7UG=B118FexWV_A4NpppuEvGfe2FkAsexCEB+FfZFx9Q519Q@mail.gmail.com>
Hi Mikl,

It is strange that the proxy is not aware about what the printer can do, if
I just do exactly the same request from my Linux Device, it works just
fine.
Requesting and caching could be an option, however, on the internet I can
read that just this single line in het snmpd.conf file should make it work.

the command lines I am executing are:

snmpget -c public -v 2c *IPaddress* 1.3.6.1.2.1.25.3.5.1.1.1

where the IPaddress is the ipaddres from the linux device or the printer.

I do not have any further source code I guess?? and which binaries do you
mean?

Kevin

2017-09-22 12:13 GMT+02:00 Michael Yarochkin <
[email protected]>:

> Hello, Kevin
>
>
> I am also new. Also still looking my way in SNMP. So, probably can not
> help a lot.
>
> But have some ideas about your problem.
>
>
> Looks like, your Linux proxy is not aware about what Printer can do. Is it
> a way to "request" and "cache" MIB from Printer on Proxy? Or "blindly"
> resend request, wait for response and resend it?
>
>
> PS. By the way: can you share your source code and also win binaries, if
> you can. Please. As i said, i am very new in SNMP. Will be happy with any
> examples.
>
>
> Mikl
> ------------------------------
> *From:* Kevin ten Braak <[email protected]>
> *Sent:* Friday, September 22, 2017 10:50:55 AM
> *To:* [email protected]
> *Subject:* Simple proxy setup
>
> Hi all,
>
> I am a newbie to SNMP and its configuration, so my apologies for asking a
> question that might have a very simple answer. However, I have been
> searching on the internet for some time now, and I just cannot figure out
> what I am doing wrong.
>
> Context:
> I have an HP Color Laser Jet Printer which is connected by ethernet (port
> 1) to a Device running Ubuntu 16.04 and having two ethernet ports. From my
> Windows (10) laptop, which is connected to port 2 of the Linux Device, I
> want to have SNMP connection with the printer. For example, I want to be
> able to ask the OID 1.3.6.1.2.1.25.3.5.1.1.1 (hrPrinterStatus.1) from the
> HP printer (having Static IP 190.168.6.132) by just sending a SNMP request
> to my Linux Device (having IP 190.168.6.133 on port 1 and IP 190.168.6.134
> on port 2).
>
> What I did:
> I setup as wel as an agent as an manager (manager was unnecessary) on the
> Linux Device as specified here:
>
> https://www.digitalocean.com/community/tutorials/how-to-
> install-and-configure-an-snmp-daemon-and-client-on-ubuntu-14-04
>
> As far as I know, this can simply be solved by using a proxy.
> This is why I added the line
>
> proxy -v 2c -c public 192.168.6.132 .1.3
>
> to my snmpd.conf file.
>
> However, when I do a snmp request from my laptop, to my Linux Device. I
> get "No Such Instance currently exists at this OID" / Agent response
> reported an Error Status of NoSuchName.
> Apparently my SNMP request still looks for the OID at my Linux Device,
> which isn't a Printer and therefore does not have the OID I am asking for.
>
> Question:
> I am able to do SNMP requests from my Laptop to my Linux Device, and from
> my Linux Device to my Printer. However, I want the Linux device to just
> forward the requests to my Printer. I do not want any SNMP requests for
> asking OIDs from my Linux Device itself, only the Printer. Preferably I
> would like to just use the 'public' community.
> Can anybody help me out? Below you can find my current snmpd.conf file
> (also in attachment)
>
> Thank you in advance!
>
> Best regards,
>
> Kevin
>
> snmpd.conf:
>
> ############################################################
> ###################
> #
> # EXAMPLE.conf:
> #   An example configuration file for configuring the Net-SNMP agent
> ('snmpd')
> #   See the 'snmpd.conf(5)' man page for details
> #
> #  Some entries are deliberately commented out, and will need to be
> explicitly activated
> #
> ############################################################
> ###################
> #
> #  AGENT BEHAVIOUR
> #
>
> #  Listen for connections from the local system only
> #agentAddress  udp:127.0.0.1:161
> #  Listen for connections on all interfaces (both IPv4 *and* IPv6)
> agentAddress udp:161,udp6:[::1]:161
>
>
>
> ############################################################
> ###################
> #
> #  SNMPv3 AUTHENTICATION
> #
> #  Note that these particular settings don't actually belong here.
> #  They should be copied to the file /var/lib/snmp/snmpd.conf
> #     and the passwords changed, before being uncommented in that file
> *only*.
> #  Then restart the agent
>
> #  createUser authOnlyUser  MD5 "remember to change this password"
> #  createUser authPrivUser  SHA "remember to change this one too"  DES
> #  createUser internalUser  MD5 "this is only ever used internally, but
> still change the password"
> #createUser bootstrap MD5 temp_password DES
>
> #  If you also change the usernames (which might be sensible),
> #  then remember to update the other occurances in this example config
> file to match.
>
>
>
> ############################################################
> ###################
> #
> #  ACCESS CONTROL
> #
>
>                                                  #  system + hrSystem
> groups only
> ###view   systemonly  included   .1.3.6.1.2.1.1
> ###view   systemonly  included   .1.3.6.1.2.1.25.1
> view   all         included   .1
>                                                  #  Full access from the
> local host
> #rocommunity public  localhost
>                                                  #  Default access to
> basic system info
> ### rocommunity public  default    -V systemonly
> rocommunity public
>                                                  #  rocommunity6 is for
> IPv6
>  rocommunity6 public  default   -V systemonly
>
>                                                  #  Full access from an
> example network
>                                                  #     Adjust this network
> address to match your local
>                                                  #     settings, change
> the community string,
>                                                  #     and check the
> 'agentAddress' setting above
> #rocommunity secret  10.0.0.0/16
>
>                                                  #  Full read-only access
> for SNMPv3
>  rouser   authOnlyUser
>                                                  #  Full write access for
> encrypted requests
>                                                  #     Remember to
> activate the 'createUser' lines above
> #rwuser   authPrivUser   priv
>
> #rwuser bootstrap priv
> rwuser demo priv
>
> #  It's no longer typically necessary to use the full
> 'com2sec/group/access' configuration
> #  r[ow]user and r[ow]community, together with suitable views, should
> cover most requirements
>
>
>
> ############################################################
> ###################
> #
> #  SYSTEM INFORMATION
> #
>
> #  Note that setting these values here, results in the corresponding MIB
> objects being 'read-only'
> #  See snmpd.conf(5) for more details
> #sysLocation    Sitting on the Dock of the Bay
> sysContact     Me <[email protected]>
>                                                  # Application +
> End-to-End layers
> sysServices    72
>
>
> #
> #  Process Monitoring
> #
>                                # At least one  'mountd' process
> proc  mountd
>                                # No more than 4 'ntalkd' processes - 0 is
> OK
> proc  ntalkd    4
>                                # At least one 'sendmail' process, but no
> more than 10
> proc  sendmail 10 1
>
> #  Walk the UCD-SNMP-MIB::prTable to see the resulting output
> #  Note that this table will be empty if there are no "proc" entries in
> the snmpd.conf file
>
>
> #
> #  Disk Monitoring
> #
>                                # 10MBs required on root disk, 5% free on
> /var, 10% free on all other disks
> disk       /     10000
> disk       /var  5%
> includeAllDisks  10%
>
> #  Walk the UCD-SNMP-MIB::dskTable to see the resulting output
> #  Note that this table will be empty if there are no "disk" entries in
> the snmpd.conf file
>
>
> #
> #  System Load
> #
>                                # Unacceptable 1-, 5-, and 15-minute load
> averages
> load   12 10 5
>
> #  Walk the UCD-SNMP-MIB::laTable to see the resulting output
> #  Note that this table *will* be populated, even without a "load" entry
> in the snmpd.conf file
>
>
>
> ############################################################
> ###################
> #
> #  ACTIVE MONITORING
> #
>
>                                     #   send SNMPv1  traps
>  trapsink     localhost public
>                                     #   send SNMPv2c traps
> #trap2sink    localhost public
>                                     #   send SNMPv2c INFORMs
> #informsink   localhost public
>
> #  Note that you typically only want *one* of these three lines
> #  Uncommenting two (or all three) will result in multiple copies of each
> notification.
>
>
> #
> #  Event MIB - automatically generate alerts
> #
>                                    # Remember to activate the 'createUser'
> lines above
> iquerySecName   internalUser
> rouser          internalUser
>                                    # generate traps on UCD error conditions
> defaultMonitors          yes
>                                    # generate traps on linkUp/Down
> linkUpDownNotifications  yes
>
>
>
> ############################################################
> ###################
> #
> #  EXTENDING THE AGENT
> #
>
> #
> #  Arbitrary extension commands
> #
>  extend    test1   /bin/echo  Hello, world!
>  extend-sh test2   echo Hello, world! ; echo Hi there ; exit 35
> #extend-sh test3   /bin/sh /tmp/shtest
>
> #  Note that this last entry requires the script '/tmp/shtest' to be
> created first,
> #    containing the same three shell commands, before the line is
> uncommented
>
> #  Walk the NET-SNMP-EXTEND-MIB tables (nsExtendConfigTable,
> nsExtendOutput1Table
> #     and nsExtendOutput2Table) to see the resulting output
>
> #  Note that the "extend" directive supercedes the previous "exec" and
> "sh" directives
> #  However, walking the UCD-SNMP-MIB::extTable should still returns the
> same output,
> #     as well as the fuller results in the above tables.
>
>
> #
> #  "Pass-through" MIB extension command
> #
> #pass .1.3.6.1.4.1.8072.2.255  /bin/sh       PREFIX/local/passtest
> #pass .1.3.6.1.4.1.8072.2.255  /usr/bin/perl PREFIX/local/passtest.pl
>
> # Note that this requires one of the two 'passtest' scripts to be
> installed first,
> #    before the appropriate line is uncommented.
> # These scripts can be found in the 'local' directory of the source
> distribution,
> #     and are not installed automatically.
>
> #  Walk the NET-SNMP-PASS-MIB::netSnmpPassExamples subtree to see the
> resulting output
>
>
> #
> #  AgentX Sub-agents
> #
>                                            #  Run as an AgentX master agent
>  master          agentx
>                                            #  Listen for network
> connections (from localhost)
>                                            #    rather than the default
> named socket /var/agentx/master
> #agentXSocket    tcp:localhost:705
>
> proxy -v 2c -c public 192.168.6.132 .1.3
>
>
>
>
>


-- 

*drs. ir. Kevin ten Braak*
Design Engineer
[email protected] <[email protected]>
Mobile: +31 6 28036078 <+31%206%2028036078>
Phone: + 31 40 7516124 <+31%2040%20751%206124>


Sioux LIME
Mathware for hardware and software
Esp 405, 5633 AJ, Eindhoven
www.limebv.nl

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.